Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/OlU7bvgL-SIxL5a43cHyGajEEhs.mft
File:                     OlU7bvgL-SIxL5a43cHyGajEEhs.mft (raw, json)
Hash identifier:          QXSEX+Wd2bwWWm9yFKybWif1ZmtJMBXdzcPXEOMN4d8=
Subject key identifier:   B7:6E:FB:07:AC:BD:8F:4A:7B:CE:89:1F:BF:8E:42:2B:8B:5F:36:D4
Authority key identifier: 3A:55:3B:6E:F8:0B:F9:22:31:2F:96:B8:DD:C1:F2:19:A8:C4:12:1B
Certificate issuer:       /CN=F36EF7D0AF/serialNumber=3A553B6EF80BF922312F96B8DDC1F219A8C4121B
Certificate serial:       03CD
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/OlU7bvgL-SIxL5a43cHyGajEEhs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/OlU7bvgL-SIxL5a43cHyGajEEhs.mft
Manifest number:          03A2
Signing time:             Sat 23 Aug 2025 03:40:53 +0000
Manifest this update:     Sat 23 Aug 2025 03:40:52 +0000
Manifest next update:     Mon 25 Aug 2025 03:40:52 +0000
Files and hashes:         1: OlU7bvgL-SIxL5a43cHyGajEEhs.crl (hash: o7snIrhXhxsv4octYRC7MhDjjWrWcRP7FDrqZ3YtccE=)
                          2: 401DB4F42F1E11F09B881AB3DAE4EC9C.roa (hash: xj4UFgtRmUF6hPhDY8QCTAupvw1psvGB0HcdO8EfGgk=)
                          3: 00C569A2002D11F08D8D918C762E951A.roa (hash: J2zGLkOSE56js9RNvJ4OT497mQJdthstAM3GPqfXq4g=)
                          4: A9777DB400A111F0BFE5D984762E951A.roa (hash: /NRI84ju86WCQqU5dc2FqAKEMK10FL0ooHDMUCIRqrU=)
                          5: 8A0596E448DE11EF82EDFA4F762E951A.roa (hash: pTkaYfOMalP4Ac9YVOrNd/HL6aUPMLSzJ9NLjfsNk8k=)
                          6: 1C19002A58A711EF91CC474E762E951A.roa (hash: 28b+AJrYiZxyaN6PahnQJz38qCvJBTTx3Q3ULsHDeuc=)
                          7: 7050CF3A2EAB11F0B4B053A7DAE4EC9C.roa (hash: aOFRM5Th4Ppr9x/V2gxhKzhGJiZ2YiGkDB5kt+uThQY=)
                          8: A46FECBA0D4611EF94FE720E017001B1.roa (hash: 1+eZFsoTVxew2nM8QAmKo9cbdoGw9gIVLATJ2Cve9BY=)
                          9: 487DF37800FE11F09431944D762E951A.roa (hash: vFH43GxrKZ9rqeJkPBqFNCpNF2wmx+m29HBGPHLRYRU=)
                          10: 409CF10850E111F0986264E2DAE4EC9C.roa (hash: Rv8B7d0mX6Fqq83MoQ7dcQHGa++1Fp9qoSXiOUYArXg=)
                          11: AE6DAEF23FE311F08E1CA0BADAE4EC9C.roa (hash: NcoPOIw5nkiJxRXHYEGD+Qp0wgE7N4ijW+oi6r7fxHs=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/OlU7bvgL-SIxL5a43cHyGajEEhs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/OlU7bvgL-SIxL5a43cHyGajEEhs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/OlU7bvgL-SIxL5a43cHyGajEEhs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 25 Aug 2025 00:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 973 (0x3cd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36EF7D0AF, serialNumber=3A553B6EF80BF922312F96B8DDC1F219A8C4121B
        Validity
            Not Before: Aug 23 03:40:52 2025 GMT
            Not After : Aug 25 03:40:52 2025 GMT
        Subject: CN=68a93845-46be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:9c:26:92:f6:5b:94:58:7b:67:9e:fd:cc:f9:
                    bf:bd:b0:93:6b:fe:18:b9:ec:6e:74:b8:8b:07:77:
                    13:d4:bb:4c:98:f0:3a:90:cf:52:a9:80:4e:f9:5b:
                    22:96:67:84:3b:3a:e3:31:e7:e8:f8:b9:bd:f3:0d:
                    4e:1b:d2:cd:cd:ef:66:34:82:ee:1f:4e:70:4f:85:
                    a0:9d:06:76:47:c4:56:db:11:03:75:4c:ec:c5:73:
                    fa:27:8d:a6:ab:f1:e3:fe:85:d3:f3:a1:a2:88:25:
                    70:f4:57:32:81:0c:48:2a:44:d9:ec:42:63:be:a6:
                    8a:e3:79:34:11:ce:31:86:b5:1a:3b:d4:c6:47:ba:
                    e4:bf:5f:80:76:95:74:09:12:19:b6:ff:b6:21:6f:
                    95:6d:88:63:f9:b0:8e:84:69:43:f3:1b:44:0e:03:
                    0e:b3:80:1e:0b:84:1c:7d:59:2e:10:77:92:7a:2c:
                    9e:58:5a:e5:ec:11:59:f7:dd:9a:79:b7:27:1e:c6:
                    a2:e8:10:5d:1b:c8:34:2d:8a:0a:97:e7:a5:52:5e:
                    54:3d:50:01:f8:95:04:34:c7:f7:7f:34:df:dd:3a:
                    45:5b:67:ba:61:38:bc:90:db:b7:4c:ba:b5:01:ea:
                    b8:03:1a:3f:58:65:1f:ae:d0:34:07:69:5a:f6:f8:
                    72:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:6E:FB:07:AC:BD:8F:4A:7B:CE:89:1F:BF:8E:42:2B:8B:5F:36:D4
            X509v3 Authority Key Identifier:
                keyid:3A:55:3B:6E:F8:0B:F9:22:31:2F:96:B8:DD:C1:F2:19:A8:C4:12:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/OlU7bvgL-SIxL5a43cHyGajEEhs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/OlU7bvgL-SIxL5a43cHyGajEEhs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/OlU7bvgL-SIxL5a43cHyGajEEhs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:21:5c:9d:6d:03:d6:9d:d7:56:f6:62:a7:38:1b:c4:75:c0:
         d0:f2:54:62:0c:a9:37:37:e2:71:31:f4:62:4f:63:26:9f:9e:
         af:11:4a:bf:13:c7:3b:0d:20:85:bd:2b:f0:ce:dd:bf:d6:a7:
         f0:27:4d:02:29:72:ae:38:48:69:7e:63:62:78:f1:4f:0c:17:
         c7:cc:6a:37:54:5d:09:99:b1:e7:cc:ad:e6:83:af:d0:02:88:
         e2:f5:2f:55:c5:3d:8b:a2:01:45:f1:d9:22:a3:f2:cc:b3:24:
         7b:f9:11:07:55:95:56:90:28:af:2f:75:d9:7f:ac:2c:7e:9c:
         c1:b2:68:e8:60:86:e2:d8:cb:53:4e:de:59:82:bf:ea:50:b3:
         6e:5f:cb:7b:cc:1e:3a:df:8d:b9:3c:ca:c8:06:3d:06:df:ba:
         62:0b:7a:58:70:9e:65:3f:dd:c0:c7:6c:4c:df:25:e9:7f:5f:
         ca:b5:a3:e4:fd:10:d0:ac:36:c7:24:b9:eb:ca:65:8d:81:ac:
         09:79:2f:fb:0b:7b:6d:0a:d3:9a:af:68:50:ce:1c:5c:f1:a5:
         5f:35:e5:0b:41:c7:a5:cb:85:6d:ac:7c:a5:de:0c:5d:1f:ac:
         14:d9:6b:88:bb:4f:43:f1:f7:55:74:b7:9a:15:12:f7:b2:56:
         7f:2e:1c:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:12:10 2025 by rpki-client